CVE-2023-43786

Medium

Advisory

Published 3 Oct 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 205; of 17,781 indexed, latest versions
Container images: 195; deployed by those charts
Fix available: 3 of 3; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 205 of 17,781 indexed charts deploy, on 195 images.

Affected package	Affected versions	Fixed in	Images
libx11deb	2:1.6.2-1ubuntu2, 2:1.6.2-1ubuntu2.1, 2:1.6.3-1ubuntu2, 2:1.6.3-1ubuntu2.1+11 more	2:1.6.2-1ubuntu2.1+esm5, 2:1.6.3-1ubuntu2.2+esm4, 2:1.6.4-3ubuntu0.4+esm2, 2:1.6.9-2ubuntu1.6+2 more	149
libx11apk	1.8-r0, 1.8-r1, 1.8.3-r0, 1.8.3-r1+4 more	1.8.7-r0	46
libxpmdeb	1:3.5.10-1ubuntu0.1, 1:3.5.11-1ubuntu0.16.04.1, 1:3.5.12-1, 1:3.5.12-1build2+2 more	1:3.5.10-1ubuntu0.1+esm2, 1:3.5.11-1ubuntu0.16.04.1+esm2, 1:3.5.12-1ubuntu0.18.04.2+esm1, 1:3.5.12-1ubuntu0.20.04.2+1 more	46

OSV records: ALPINE-CVE-2023-43786 DEBIAN-CVE-2023-43786 UBUNTU-CVE-2023-43786
Also known as: USN-6407-1, USN-6407-2, USN-6408-1, USN-6408-2

Charts affected

205 by stars

Chart

Latest

Affected images

Radar Score

stakefishstakefish

0.1.0

1 of 8 See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2023-43786.

Container image	Digest	Package	Fixed in
thongngo3301/stakefish :latest	a341af5976e3	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2

Open the chart page →

20,223

unifistartechnica

0.1.3

1 of 2 See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2023-43786.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.1.66	4a3616625dda	libx11@2:1.6.4-3ubuntu0.4	2:1.6.4-3ubuntu0.4+esm2

Open the chart page →

14,493

tensor_apptensor-app

0.2.2

2 of 3 See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2023-43786.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	libx11@2:1.7.5-1 libxpm@1:3.5.12-1build2	2:1.7.5-1ubuntu0.3 1:3.5.12-1ubuntu0.22.04.2
xeladock/nginx2 :latest	c259a67b1dff	libx11@2:1.7.5-1 libxpm@1:3.5.12-1build2	2:1.7.5-1ubuntu0.3 1:3.5.12-1ubuntu0.22.04.2

Open the chart page →

17,461

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-43786.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2

Open the chart page →

14,358

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-43786.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6

Open the chart page →

11,405

Container images carrying it

195 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
vlebediantsev/notes-admin-front :latest	007c6670ff48	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1
vlebediantsev/notes-project-front :latest	945675fd2636	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1
vlebediantsev/registration-ms-front-app-host :latest	54f69d116c50	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1
voltha/voltha-cli :1.6.0	c4e41e92f046	libx11@2:1.6.3-1ubuntu2.1	2:1.6.3-1ubuntu2.2+esm4	1
voltha/voltha-onos :5.1.8	e038acb950d3	libx11@2:1.6.4-3ubuntu0.2	2:1.6.4-3ubuntu0.4+esm2	1
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
wavefronthq/proxy :9.2	d1064d28f6eb	libx11@2:1.6.4-3ubuntu0.2 libxpm@1:3.5.12-1	2:1.6.4-3ubuntu0.4+esm2 1:3.5.12-1ubuntu0.18.04.2+esm1	1
xeladock/mysql_dns :latest	4baf531453f1	libx11@2:1.7.5-1 libxpm@1:3.5.12-1build2	2:1.7.5-1ubuntu0.3 1:3.5.12-1ubuntu0.22.04.2	1
xeladock/nginx2 :latest	c259a67b1dff	libx11@2:1.7.5-1 libxpm@1:3.5.12-1build2	2:1.7.5-1ubuntu0.3 1:3.5.12-1ubuntu0.22.04.2	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	libx11@2:1.7.5-1 libxpm@1:3.5.12-1build2	2:1.7.5-1ubuntu0.3 1:3.5.12-1ubuntu0.22.04.2	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	libx11@2:1.7.5-1 libxpm@1:3.5.12-1build2	2:1.7.5-1ubuntu0.3 1:3.5.12-1ubuntu0.22.04.2	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	libx11@2:1.6.4-3ubuntu0.2	2:1.6.4-3ubuntu0.4+esm2	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
ghcr.io/daocloud/dao-2048 :v1.4.1	21275bc02f75	libx11@1.8.4-r0	1.8.7-r0	1
ghcr.io/eugenmayer/nist-data-mirror :0.1.1	a2162df94729	libx11@1.8.4-r0	1.8.7-r0	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	libx11@1.8.4-r4	1.8.7-r0	1
ghcr.io/jfwenisch/discord-experiencebot :latest	b52ff07f9f0c	libx11@2:1.6.4-3ubuntu0.4	2:1.6.4-3ubuntu0.4+esm2	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	libx11@2:1.7.5-1	2:1.7.5-1ubuntu0.3	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	libx11@2:1.6.4-3ubuntu0.4 libxpm@1:3.5.12-1	2:1.6.4-3ubuntu0.4+esm2 1:3.5.12-1ubuntu0.18.04.2+esm1	1
ghcr.io/mjohnson9/docker-pleroma :v0.1.4	4f08e2823756	libx11@1.8-r0	1.8.7-r0	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
ghcr.io/pascaliske/traefik-errors :1.1.0	0cf31753ce57	libx11@1.8.4-r0	1.8.7-r0	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
ghcr.io/smarter-project/pulseaudio :v0.0.4	becfd364355b	libx11@1.8-r0	1.8.7-r0	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	libx11@2:1.7.5-1	2:1.7.5-1ubuntu0.3	1
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	libx11@1.8.4-r0	1.8.7-r0	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	libx11@2:1.6.3-1ubuntu2.1	2:1.6.3-1ubuntu2.2+esm4	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1